1. Home
  2. CVE Database
  3. CVE-2023-20079
CRITICAL · 9.8

CVE-2023-20079

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) c...

Vulnerability Description

Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoIp Phone 6871 Firmware< 11.3.7sr1
CiscoIp Phone 6871-
CiscoIp Phone 6861 Firmware< 11.3.7sr1
CiscoIp Phone 6861-
CiscoIp Phone 6851 Firmware< 11.3.7sr1
CiscoIp Phone 6851-
CiscoIp Phone 6841 Firmware< 11.3.7sr1
CiscoIp Phone 6841-
CiscoIp Phone 6825 Firmware< 11.3.7sr1
CiscoIp Phone 6825-
CiscoIp Phone 7861 Firmware< 11.3.7sr1
CiscoIp Phone 7861-
CiscoIp Phone 7841 Firmware< 11.3.7sr1
CiscoIp Phone 7841-
CiscoIp Phone 7832 Firmware< 11.3.7sr1
CiscoIp Phone 7832-
CiscoIp Phone 7821 Firmware< 11.3.7sr1
CiscoIp Phone 7821-
CiscoIp Phone 7811 Firmware< 11.3.7sr1
CiscoIp Phone 7811-

Related Weaknesses (CWE)

CWE-121CWE-787

References

FAQ

What is CVE-2023-20079?

CVE-2023-20079 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) c...

How severe is CVE-2023-20079?

CVE-2023-20079 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-20079?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ip Phone 6871 Firmware, Cisco Ip Phone 6871, Cisco Ip Phone 6861 Firmware, Cisco Ip Phone 6861, Cisco Ip Phone 6851 Firmware.